Internal Auditor, Luxembourg

Position Overview: Bridge Building S.A. (BBSA) is building a Luxembourg-regulated EMI and CASP. We are seeking an Internal Auditor manager to establish and execute a risk-based internal audit approach across core regulated-entity domains, including governance, safeguarding, treasury, AML/CTF, ICT/DORA, and outsourcing. The role will be reporting to the Internal Audit Officer based based in Ireland. Key Responsibilities: Audit Planning and Execution: Develop with the Internal Audit Officer and maintain a risk-based annual audit plan aligned with BBSA’s risk profile and regulatory priorities. Execute audits end-to-end (scoping, walkthroughs, control testing, sampling, issue grading, and reporting). Regulated Entity Coverage: Audit key frameworks and operations, including AML/CTF controls, safeguarding and reconciliation processes, treasury operations, ICT risk management, incident governance, and outsourcing oversight. Assess design and operating effectiveness of controls and identify root causes for weaknesses. Reporting and Remediation Follow-Up: Produce clear audit reports with pragmatic remediation actions and timelines. Track action plans to closure, validate fixes, and report progress to Internal Auditor Officer senior management and the Board/Audit Committee. Coordination and Inspection Support: Coordinate with external auditors and support supervisory inspections by preparing evidence and independent perspectives. Contribute to continuous improvement of audit methodology, documentation standards, and quality assurance. Key Requirements: Education: Bachelor’s or Master’s degree in Accounting, Finance, Business, or a related discipline. Experience: 5+ years in internal audit or equivalent assurance roles within regulated financial services. Experience in payments/EMI/PI and/or fintech/crypto is advantageous. Certifications: CIA, CISA, or equivalent certification strongly preferred. Skills: Ability to plan and execute internal audits across finance, operations, compliance, IT and cybersecurity. Strong interpersonal skills with the ability to create trust with stakeholders. Strong analytical, investigative, control testing and reporting skills; excellent judgment and ability to communicate issues clearly to senior stakeholders as well as produce clear written assessments and regulatory-ready documentation Adaptable, self driven and comfortable in a fast paced, evolving environment. High standards of professionalism, independence, and discretion. Languages: Fluent English required